Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pl69XGkIB7JdG-sYm-1byGbU84k.roa
File: pl69XGkIB7JdG-sYm-1byGbU84k.roa (raw, json)
Hash identifier: 31tWPzXnUdhqVrxYGSuWKCjuTzeMxFH28fMeBI9ZQ7E=
Subject key identifier: A6:5E:BD:5C:69:08:07:B2:5D:1B:EB:18:9B:ED:5B:C8:66:D4:F3:89
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369E989FEC718671EC92D80759FBA56
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pl69XGkIB7JdG-sYm-1byGbU84k.roa
Signing time: Wed 01 Jan 2025 19:48:51 +0000
ROA not before: Wed 01 Jan 2025 19:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198015
IP address blocks: 2a0f:7803:ff80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e9:89:fe:c7:18:67:1e:c9:2d:80:75:9f:ba:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a65ebd5c690807b25d1beb189bed5bc866d4f389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:7f:00:c9:4c:c7:cf:20:c7:4f:6d:fd:12:
a4:7d:ef:42:14:1e:c8:40:cb:94:f6:01:6e:b9:ef:
39:eb:5a:ae:1c:3e:0c:be:83:e6:d4:77:d5:66:46:
7f:b5:19:d9:ea:16:2c:9c:4f:ef:10:7e:f1:8b:ae:
11:7e:68:3a:70:47:f1:dd:02:ce:01:b5:63:2e:8c:
2d:f6:b1:7c:7d:55:0a:90:dc:f2:01:46:dc:3d:07:
e2:3c:46:ac:e6:b6:87:d7:9b:bc:7d:40:31:6d:d8:
67:2e:4f:9a:2e:5a:e5:f8:c4:bc:bd:6c:4a:09:ab:
00:a3:9b:63:1d:01:35:fc:b7:84:e6:78:49:dc:34:
bf:f1:32:59:a1:94:2b:79:7f:7a:0d:7e:96:a5:b4:
b5:35:76:f6:05:af:90:63:75:cc:53:fd:68:d9:40:
5c:00:69:43:20:28:69:49:30:a9:4e:95:54:ef:85:
83:c2:ca:e1:54:9f:50:01:03:19:22:7a:0c:a1:4d:
d2:fc:dc:96:d0:f6:22:e2:be:a0:17:94:e9:17:db:
f0:95:e5:5d:a5:7f:c9:7f:39:29:1b:4b:38:52:d3:
28:1a:35:fb:70:86:c4:99:2c:62:e3:31:1e:87:84:
67:d0:ec:42:f7:8d:28:63:46:c6:fa:7a:40:c1:e7:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5E:BD:5C:69:08:07:B2:5D:1B:EB:18:9B:ED:5B:C8:66:D4:F3:89
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pl69XGkIB7JdG-sYm-1byGbU84k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ff80::/44
Signature Algorithm: sha256WithRSAEncryption
45:50:61:b3:06:81:10:32:b7:1d:e9:76:ea:c4:da:a2:11:46:
d1:31:39:41:41:55:de:a9:29:21:ef:9a:ed:89:20:60:56:b0:
1d:39:60:79:55:01:10:2b:3e:8d:1f:5a:41:2e:9a:86:49:15:
bd:02:06:06:26:f0:3b:6d:17:a1:84:bf:32:90:27:fb:e4:84:
08:e1:f7:50:9a:a4:b4:cb:63:61:36:d1:c1:fb:16:d7:32:50:
e7:86:22:15:ce:54:60:18:39:8e:fb:33:59:f9:d0:00:0f:7e:
56:fd:30:de:cc:22:a9:fa:6a:8c:eb:70:b4:de:04:31:ce:d0:
09:0e:4e:80:6e:ec:d1:ee:7b:36:8c:52:22:58:56:4a:b2:43:
58:62:ea:0d:4a:86:99:29:84:04:7f:5b:a7:01:1b:07:42:36:
3b:c6:84:9a:93:0d:dd:e5:ad:d6:bb:2d:d1:0e:d4:a0:fd:53:
16:2f:62:22:c4:d9:7d:04:f6:fe:6b:a6:0c:97:b8:89:cd:21:
54:46:d4:a2:6c:59:b2:93:c7:e0:1d:19:73:b1:ef:40:f8:ee:
16:00:04:1f:8a:fc:a2:11:d1:f8:c3:1b:b0:7a:16:be:4d:bf:
ae:a9:c5:d7:d7:0d:49:52:b6:9e:5f:8a:c1:c4:db:ce:d6:b3:
43:c8:8d:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQjaemJ/scYZx7JLYB1n7pWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjUwMTAxMTk0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjVlYmQ1YzY5MDgwN2IyNWQxYmViMTg5YmVkNWJjODY2ZDRmMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY5/AMlMx88gx09t/RKkfe9CFB7I
QMuU9gFuue8561quHD4MvoPm1HfVZkZ/tRnZ6hYsnE/vEH7xi64Rfmg6cEfx3QLO
AbVjLowt9rF8fVUKkNzyAUbcPQfiPEas5raH15u8fUAxbdhnLk+aLlrl+MS8vWxK
CasAo5tjHQE1/LeE5nhJ3DS/8TJZoZQreX96DX6WpbS1NXb2Ba+QY3XMU/1o2UBc
AGlDIChpSTCpTpVU74WDwsrhVJ9QAQMZInoMoU3S/NyW0PYi4r6gF5TpF9vwleVd
pX/JfzkpG0s4UtMoGjX7cIbEmSxi4zEeh4Rn0OxC940oY0bG+npAwefK8QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKZevVxpCAeyXRvrGJvtW8hm1POJMB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvcGw2OVhHa0lCN0pkRy1zWW0tMWJ5R2JVODRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/+A
MA0GCSqGSIb3DQEBCwUAA4IBAQBFUGGzBoEQMrcd6XbqxNqiEUbRMTlBQVXeqSkh
75rtiSBgVrAdOWB5VQEQKz6NH1pBLpqGSRW9AgYGJvA7bRehhL8ykCf75IQI4fdQ
mqS0y2NhNtHB+xbXMlDnhiIVzlRgGDmO+zNZ+dAAD35W/TDezCKp+mqM63C03gQx
ztAJDk6AbuzR7ns2jFIiWFZKskNYYuoNSoaZKYQEf1unARsHQjY7xoSakw3d5a3W
uy3RDtSg/VMWL2IixNl9BPb+a6YMl7iJzSFURtSibFmyk8fgHRlzse9A+O4WAAQf
ivyiEdH4wxuweha+Tb+uqcXX1w1JUraeX4rBxNvO1rNDyI3q
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:24 2025 by rpki-client